This case is now over. The Santy worm is not spreading any more, thanks to Google.
Google started filtering the queries made by the worm around midnight GMT, effectively stopping the spread of the worm. Apparently they are doing this based on a combination of the search terms and the User-Agent header field.
This is from an email we got from the Google Security Team:
While a seven hour response for something like this is not outrageous,
we think we can and should do better. We will be reviewing our
procedures to improve our response time in the future to similar problems.
Google started filtering the queries made by the worm around midnight GMT, effectively stopping the spread of the worm. Apparently they are doing this based on a combination of the search terms and the User-Agent header field.
This is from an email we got from the Google Security Team:
While a seven hour response for something like this is not outrageous,
we think we can and should do better. We will be reviewing our
procedures to improve our response time in the future to similar problems.
Comment